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1 a c ad o-- r *f ng emails 

Ian Fette, Norman Sadeh, Anthony Tomasic 

May 2007 WWW '07: Proceedings of the 16th international conference on World Wide Web 
Publisher: ACM 

Full text available: Q . Additional Information 1 , % 

Bibliometrics: Downloads (6 Weeks): 41 , Downloads (12 Months): 595, Citation Count: 1 

Each month, more attacks are launched with the aim of making web users believe that they are 
communicating with a trusted entity for the purpose of stealing account information, logon 
credentials, and identity information in general. This attack method, ... 

Keywords: email, filtering, learning, phishing, semantic attacks, spam 



2 Protecting people from phishing: ihe design and evaluation of an embedded training email 

^ Ponnurangam Kumaraguru, Yong Rhee, Alessandro Acquisti, Lorrie Faith Cranor, Jason Hong, Elizal 
Nunge 

April 2007 CHI '07: Proceedings of the SI GCHI conference on Hum an factors in com puting system 
Publisher: ACM 

Full text available: f§iMil,18 .MB} Additional Information: Mi. citation, abstract, references , indsx terms 

Bibliometrics: Downloads (6 Weeks): 75, Downloads (12 Months): 557, Citation Count: 1 

Phishing attacks, in which criminals lure Internet users to websites that impersonate legitimate 
are occurring with increasing frequency and are causing considerable harm to victims. In this pa 
we describe the design and evaluation of an embedded ... 

Keywords: email, embedded training, phishing, situated learning, usable privacy and security 



3 Attacking information visualization system usability overloading and deceiving the human 
|k Gregory Conti, Mustaque Ahamad, John Stasko 

^ July 2005 SOUPS '05: Proceedings of the 2005 symposium on Usable privacy and security 
Publisher: ACM 

Full text available c - 0 K8 Additional Information i citat i ahst : efere ;es, citscs b> iciex tern 

Bibliometrics: Downloads (6 Weeks): 25, Downloads (12 Months): 235, Citation Count: 2 

Information visualization is an effective way to easily comprehend large amounts of data. For su 
systems to be truly effective, the information visualization designer must be aware of the ways 
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which their system may be manipulated and protect their ... 

Keywords: denial of information, information visualization, malicious visualizations, secure 
visualization, usability attacks 
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A, Anand Balachandran, Geoffrey M. Voelker, Paramvir Bahl 

^ September 2003 W M ASH '03: Proceedings of the 1st ACM international workshop on Wireless mobi 
applications and services on WLAN hotspots 

Publisher: ACM 

Full text available: "j™*, pdf; : ■ 7.8S KB). Additional Information 

Bibliometrics: Downloads (6 Weeks): 26, Downloads (12 Months): 194, Citation Count: 5 

In recent years, wireless Internet service providers (WISPs) have established Wi-Fi hotspots in 
increasing numbers at public venues, providing local coverage to traveling users and empowerin 
them with the ability to access email, Web, and other Internet ... 



5 Client certifi cate and IP address ba sed muiti -factor authentication for J2E E web appiicalto n 

A Heesun Park, Stan Redford 

^< October 2007 CASCON '07: Proceedings of the 2007 conference of the center for advanced studies 
Collaborative research 
Publisher: ACM 

Full text available:^ - Additional Information 

Bibliometrics: Downloads (6 Weeks): 13, Downloads (12 Months): 131 , Citation Count: 0 

Secure and encrypted authentication is an important aspect of J2EE web application security. SS 
client certificate authentication provides an encrypted log-on mechanism and a single sign-on 
capability that does not involve the use of passwords. Unlike ... 

Keyw ords: I P address checking, J2EE web application, SSL client certificate, certificate based 
authentication, multi-factor authentication 



6 ?x v * ^od systems 

Somesh Jha, Jeannette M. Wing 

July 2001 I CSE '01 : Proceedings of the 23rd International Conference on Software Engineering 
Publisher: IEEE Computer Society 

Full text available- „ iiffll Additional Information 

Bibliometrics: Downloads (6 Weeks): 8, Downloads (12 Months): 64, Citation Count: 5 

Survivability is the ability of a system to continue operating despite the presence of abnormal ei 
such as failures and intrusions. Ensuring system survivability has increased in importance as cri 
infrastructures have become heavily dependent ... 
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September 2006 NSPW '06: Proceedings of the 2006 workshop on New security paradigms 
Publisher: ACM 
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Bibliometrics: Downloads (6 Weeks): 68, Downloads (12 Months): 454, Citation Count: 0 

Virtually every Internet user on the planet uses the powerful free tools offered by a handful of 
information service providers in many aspects of their personal and professional lives. As a resu 
users and organizations are freely providing unprecedented ... 

Keywords: AOL, Google, anonymity, anonymization, fingerprinting, googling, information disck 
privacy, search, usable security 
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||v Janice C. Sipior, Burke T. Ward, P. Gregory Bonner 
^ June 2004 Com m unications of the ACM, Volume 47 issue 6 
Publisher: ACM 

Full text avallable:gpdff96.5 9 K B) g| h tmlf26. 71 KB) Additional lnformatlon fj ^ « 1 n ' & c led ' * 

Bibliometrics: Downloads (6 Weeks): 27, Downloads (12 Months): 229, Citation Count: 1 

Email marketing is an excellent, low-cost way to reach consumers, but spammers are currently 
much of its potential. The challenge is to develop an email marketing process that is consensual 
efficient, and constitutional. 



9 N - " N % \ and locked same-origin pv s , 

A, Chris Karlof, Umesh Shankar, J. D. Tygar, David Wagner 

^ October 2007 CCS '07: Proceedings of the 14th ACM conference on Computer and communications 
security 
Publisher: ACM 

Full text available: 'v KB Additional Information - ^ - \' •> 

Bibliometrics: Downloads (6 Weeks): 101 , Downloads (12 Months): 467, Citation Count: 0 

We describe a new attack against web authentication, which we call dynamic pharming. Dynami 
pharming works by hijacking DNS and sending the victim's browser malicious Javascript, which 
exploits DNS rebinding vulnerabilities and the name-based ... 

Keywords: pharming, same-origin policy, web authentication 



10 v» preventing > ) < 

Min Wu, Robert C. Miller, Greg Little 

July 2006 SOUPS '06: Proceedings of the second symposium on Usable privacy and security 
Publisher: ACM 

Full text available Q \ ' ^ x KB) Additional Information: h* cita-ion. abstract, references, ir : de>- terms 

Bibliometrics: Downloads (6 Weeks): 23, Downloads (12 Months): 279, Citation Count: 4 

We introduce a new anti-phishing solution, the Web Wallet. The Web Wallet is a browser sidebai 
which users can use to submit their sensitive information online. It detects phishing attacks by 
determining where users intend to submit their information ... 

Keywords: e-commerce, user interface design, user study, world wide web and hypermedia 
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Publisher: ACM 

Full text available: "Qpd!';266 61 KB} Additional Information . ^ i, at sferences. jnc 

Bibliometrics: Downloads (6 Weeks): 30, Downloads (12 Months): 31 1 , Citation Count: 5 

Phishing emails are semantic attacks that con people into divulging sensitive information using 
techniques to make the user believe that information is being requested by a legitimate source, 
order to develop tools that will be effective in combating ... 

Keywords: mental models, phishing, qualitative methods 



12 Johnny 2: a user test of Key continuity management with S/MiME end OeUook Express 
^ Simson L. Garfinkel, Robert C. Miller 

^ July 2005 SOUPS '05: Proceedings of the 2005 symposium on Usable privacy and security 
Publisher: ACM 

Full text available: ^ pdf(665.f33 KB) Additional Information 

Bibliometrics: Downloads (6 Weeks): 25, Downloads (12 Months): 143, Citation Count: 6 

Secure email has struggled with signifcant obstacles to adoption, among them the low usability 
encryption software and the cost and overhead of obtaining public key certificates. Key continuil 
management (KCM) has been proposed as a way to lower ... 

Keywords: Usability, e-commerce, user interaction design, user studies 
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^ Rolf Oppliger 

August 2004 Communications of the ACM, Volume 47 issues 
Publisher: ACM 

Full text available °pj JH Additional Information u!! cilailon ? c 

Bibliometrics: Downloads (6 Weeks): 16, Downloads (12 Months): 1 12, Citation Count: 0 

The lack of evidence for message receipt is a missing piece of the infrastructure required for the 
professional use of email. 
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Rachna Dhamija, J. D. Tygar 
^ July 2005 SOUPS '05: Proceedings of the 2005 symposium on Usable privacy and security 
Publisher: ACM 

Full text available:^ . - Additional Information ;^ , 

Bibliometrics: Downloads (6 Weeks): 57, Downloads (12 Months): 512, Citation Count: 16 

Phishing is a model problem for illustrating usability concerns of privacy and security because be 
system designers and attackers battle using user interfaces to guide (or misguide) users. We pre 
a new scheme, Dynamic Security Skins, that allows ... 
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Yue Zhang, Jason I. Hong, Lorrie F. Cranor 

May 2007 WWW '07: Proceedings of the 16th international conference on World Wide Web 
Publisher: ACM 

Full text available: ^|pdf{?82.94 KB) Additional Information: '.it citation, abstract. :efe:ences, ^ 
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Bibliometrics: Downloads (6 Weeks): 40, Downloads (12 Months): 429, Citation Count: 3 

Phishing is a significant problem involving fraudulent email and web sites that trick unsuspectinc 
into revealing private information. In this paper, we present the design, implementation, and 
evaluation of CANTINA, a novel, content-based approach ... 

Keywords: TF-IDF, anti-phishing, evaluation, phishing, toolbar 



16 MobHeNAT: a new technique for mobility across heterogeneous address spaces 
Milind Buddhikot, Adiseshu Hari, Kundan Singh, Scott Miller 
June2005 Mobile Netw orks and Applications, Volume 10 issue 3 
Publisher: Kluwer Academic Publishers 

Full text available . v \V' Additional Information: h& citation, abstract, references., index terms 

Bibliometrics: Downloads (6 Weeks): 19, Downloads (12 Months): 87, Citation Count: 0 

We propose a new network layer mobility architecture called MOBI LENAT to efficiently support rr 
and macro-mobility in and across heterogeneous address spaces common in emerging public 
networks. The key ideas in this architecture are as follows: (1) ... 

Keywords: MOBI LENAT, design, experimentation, mobility 
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Tom N. Jagatic, Nathaniel A. Johnson, Markus Jakobsson, Filippo Menczer 
October 2007 Communications of the ACM, Volume so issue 10 
Publisher: ACM 

Full text available:^ D dff20 4 . 74 K B' Wj html<33.37 KB) Additional '"Nation: - * ^ 

Bibliometrics: Downloads (6 Weeks): 148, Downloads (12 Months): 1899, Citation Count: 0 

Sometimes a "friendly" email message tempts recipients to reveal more online than they otherw 
would, playing right into the sender's hand. 
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Milind Buddhikot, Adiseshu Hari, Kundan Singh, Scott Miller 
^ September 2003 W M ASH '03: Proceedings of the 1st ACM international workshop on Wireless mobi 
applications and services on WLAN hotspots 

Publisher: ACM 

Full text available:^ . - Additional Information ices ^ x 

Bibliometrics: Downloads (6 Weeks): 3, Downloads (12 Months): 39, Citation Count: 0 

We propose a new network layer mobility architecture called MobileNAT to efficiently support mi 
and macro-mobility in and across heterogeneous address spaces common in emerging public 
networks. The key ideas in this architecture are as follows: (1) ... 

Keywords: MobileNAT, mobility 
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June2005 Mobile Netw orks and Applications, Volume 10 issue 3 
Publisher: Kluwer Academic Publishers 
Full text available: Additional Information: 
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Bibliometrics: Downloads (6 Weeks): 69, Downloads (12 Months): 371 , Citation Count: 2 

In recent years, wireless Interact service providers (WISPs) have established Wi-Fi hotspots in 
increasing numbers at public venues, providing local coverage to traveling users and empowerin 
them with the ability to access email, Web, and other Internet ... 

Keywords: deployment, performance 



20 PHONEY: Mimicking User Response jo .Detect Phishing Attacks 

Madhusudhanan Chandrasekaran, Ramkumar Chinchani, Shambhu Upadhyaya 

June 2006 WOWMOM '06: Proceedings of the 2006 International Symposium on on World of Wire 

Mobile and Multimedia Networks 
Publisher: IEEE Computer Society 

Full text available: ^|pdf{348.S2 KB) Additional Information ^ - - * ^ 

Bibliometrics: Downloads (6 Weeks): 12, Downloads (12 Months): 1 14, Citation Count: 0 

Phishing scams pose a serious threat to end-users and commercial institutions alike. Email conti 
to be the favorite vehicle to perpetrate such scams mainly due to its widespread use combined \ 
the ability to easily spoof them. Several approaches, ... 
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